$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4720a1a-ce8a-33fc-9741-6abbdc4077b8.roa File: e4720a1a-ce8a-33fc-9741-6abbdc4077b8.roa (raw, json) Hash identifier: 4Dtin/IRxfA2flH2gQ+xZghNDCmIPxcI2wGco065J7M= Subject key identifier: 34:4A:3D:36:64:BC:25:62:56:C3:F3:A1:07:D6:27:CA:E7:85:62:77 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A8146348F3D00A632EE435980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4720a1a-ce8a-33fc-9741-6abbdc4077b8.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 396544 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:34:8f:3d:00:a6:32:ee:43:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=7b9557bd-d2dd-4d13-9a20-cadb0e75f9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d9:cd:41:4c:be:e8:f7:b7:ad:48:64:59:55: 90:89:a3:c3:4b:2e:4c:23:a8:19:4c:17:86:dd:7b: f7:70:cc:23:02:09:3a:43:14:4b:2f:3f:3c:01:f7: 3c:c5:8f:fd:c2:11:cf:8f:4e:75:21:9a:a8:61:a4: 4a:a8:ca:93:74:01:ff:b0:00:f8:7c:89:ef:18:32: 5f:dc:1b:39:00:e9:de:09:4e:df:6f:08:e7:1a:5d: eb:a7:26:07:33:00:06:4a:11:eb:5c:e8:d3:ab:36: bc:bf:02:79:19:6e:b9:d4:9b:6e:10:7b:c1:b7:96: 8f:cc:f4:46:03:05:19:b0:95:dc:6c:53:28:94:91: 5e:c8:ca:41:e0:39:ab:e4:2a:41:b4:21:44:20:00: f2:97:2f:42:d1:a4:76:3b:bc:36:14:a3:30:33:41: 00:be:78:62:91:f1:ed:71:25:86:d0:7a:dc:94:f9: 7a:33:30:76:fe:c0:38:96:09:c8:4f:b4:bf:ff:b4: 89:12:c8:c2:3b:5e:69:6c:06:a7:f9:b4:40:d5:86: 7a:bf:80:18:e3:5f:ca:fd:08:ef:4d:66:5e:52:0e: 50:dd:48:20:08:21:d4:4c:56:5b:29:27:3f:81:28: 5e:4e:e3:bb:c8:32:b7:9d:e5:80:90:29:ef:95:65: 35:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4A:3D:36:64:BC:25:62:56:C3:F3:A1:07:D6:27:CA:E7:85:62:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4720a1a-ce8a-33fc-9741-6abbdc4077b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:d6:9e:76:46:87:3f:0a:04:52:d4:5f:bf:6a:64:34:62:bc: 8c:4b:f4:e8:dc:59:58:97:d8:b0:b0:f7:91:c6:45:04:1a:33: 23:0a:a1:f8:9a:c1:59:1e:8e:23:e3:ce:4c:51:73:04:a3:ec: f5:0f:67:9c:1d:a7:67:72:81:3d:da:f9:1b:8d:3d:f5:ba:5e: 1b:89:f1:7a:5f:87:24:0c:25:f4:39:11:7e:7f:56:64:27:09: 4a:13:76:2a:a2:06:ab:58:1e:b7:b5:91:5b:30:50:75:20:a7: 87:39:ef:e6:58:43:45:51:7b:0b:ed:6c:7b:2c:c3:81:ef:6e: a5:6c:d2:15:69:14:5b:26:03:85:ef:e4:00:72:77:c6:37:a9: 39:a9:29:36:2a:e8:57:44:13:32:da:36:7f:01:4a:ae:44:09: 81:a5:16:44:10:72:be:bf:f3:93:46:2f:97:e8:f7:9f:c8:04: a1:74:52:68:ca:11:6d:ad:9f:a4:a1:54:9f:a7:e6:fe:11:47: 77:da:4a:3e:26:f7:b3:8e:80:7c:4a:89:da:8f:1e:4d:29:1a: 94:a8:05:8e:1c:f0:e2:a3:7d:3c:e7:81:4d:6a:80:ab:d0:19: 61:83:88:6a:f2:f5:9d:68:e3:4d:07:1b:55:fb:66:8c:cd:88: 8e:da:cd:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqBRjSPPQCmMu5DWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk N2I5NTU3YmQtZDJkZC00ZDEzLTlhMjAtY2FkYjBlNzVmOWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidnNQUy+6Pe3rUhkWVWQiaPDSy5MI6gZTBeG 3Xv3cMwjAgk6QxRLLz88Afc8xY/9whHPj051IZqoYaRKqMqTdAH/sAD4fInvGDJf 3Bs5AOneCU7fbwjnGl3rpyYHMwAGShHrXOjTqza8vwJ5GW651JtuEHvBt5aPzPRG AwUZsJXcbFMolJFeyMpB4Dmr5CpBtCFEIADyly9C0aR2O7w2FKMwM0EAvnhikfHt cSWG0HrclPl6MzB2/sA4lgnIT7S//7SJEsjCO15pbAan+bRA1YZ6v4AY41/K/Qjv TWZeUg5Q3UggCCHUTFZbKSc/gSheTuO7yDK3neWAkCnvlWU1LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDRKPTZkvCViVsPzoQfWJ8rnhWJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTQ3MjBhMWEtY2U4YS0z M2ZjLTk3NDEtNmFiYmRjNDA3N2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGbWnnZGhz8KBFLUX79qZDRivIxL9OjcWViX2LCw95HGRQQaMyMK ofiawVkejiPjzkxRcwSj7PUPZ5wdp2dygT3a+RuNPfW6XhuJ8XpfhyQMJfQ5EX5/ VmQnCUoTdiqiBqtYHre1kVswUHUgp4c57+ZYQ0VRewvtbHssw4HvbqVs0hVpFFsm A4Xv5AByd8Y3qTmpKTYq6FdEEzLaNn8BSq5ECYGlFkQQcr6/85NGL5fo95/IBKF0 UmjKEW2tn6ShVJ+n5v4RR3faSj4m97OOgHxKidqPHk0pGpSoBY4c8OKjfTzngU1q gKvQGWGDiGry9Z1o400HG1X7ZozNiI7azZA= -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:29 2025 by rpki-client